CVE-2005-0418 Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file...
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. NOTE: it is highly likely that this item will be MERGED with CVE-2005-0836.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun j2se | = 1.4.2 | No fix listed |
| sun j2se | = 1.4.2_01 | No fix listed |
| sun j2se | = 1.4.2_02 | No fix listed |
| sun j2se | = 1.4.2_03 | No fix listed |
| sun j2se | = 1.4.2_04 | No fix listed |
| sun j2se | = 1.4.2_05 | No fix listed |
| sun j2se | = 1.4.2_06 | No fix listed |
References
- APPLE-SA-2005-03-24 patch vendor-advisory